Information for customers, suppliers and other business partners in accordance with article 13 EU General Data Protection Regulation
Thank you for your interest in our company and your visit to our website or mobile application. We take the protection of your personal data very seriously.
We process all your personal data such as your name, address, e-mail address and telephone number in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation in Germany.
With this data protection policy, we want to inform you of the purpose, nature and scope of the personal data we collect, store, process and inform you about our data protection and security measures. We also wish to inform you of your rights under the new EU regulation.
1. Name and address of data controller
Data controller in accordance with EU General Data Protection Regulation and other data protection legislation that applies in EU Member States:
Pollmeier Massivholz GmbH & Co.KG
Pferdsdorfer Weg 6
D-99831 Amt Creuzburg
Telephone: +49 (0)36926 945-0
Fax: +49 (0)36926 945-91101
2. Persons covered by our data protection policy
This data protection policy applies to all persons who are customers, suppliers or other business partners of Pollmeier Massivholz GmbH & Co.KG, as well as their employees. This document explains how Pollmeier Massivholz GmbH & Co.KG, Pferdsdorfer Weg 6, 99831 Creuzburg (hereafter referred to as "Pollmeier" or "we") and companies owned by or affiliated with Pollmeier handle and process personal data obtained in the course of their normal business.
3. Personal data
Provided that we are entitled to do so by law, Pollmeier collects and processes the following personal data:
Title / job title / gender / profession
Work contact details (address, telephone, fax, e-mail address)
Name of employer
Communicated content (texts of e-mails, minutes of meetings, business correspondence, etc.)
Offered or performed services / offered or delivered products
Invoice and payment details
Information regarding business relationship
Information on planned construction projects, including parties involved in project
Use of our websites
When you visit one of our websites, we might collect certain technical data relating to you as the user. This information is transferred automatically to us by your browser the moment you call up a website on the internet or open an application on your mobile device.
The data is automatically stored on our servers and contains your IP address, details of the browser you use (software product, interface language), the date and time of your access as well as the Uniform Resource Locators or URLs (web page addresses) of pages you visited before and after calling up our website.
Depending on the actual location of the user and the type of data, such technical data might also include personal information.
To make your visit to our website more pleasant and to allow the use of certain functions, we use so-called cookies on some pages. Cookies are small text files which are saved on your computer. At the end of your browser session, most of the cookies that we use are deleted from your hard drive (session cookies). The so-called permanent cookies, on the other hand, remain on your computer and enable us to recognise your browser upon your next visit. Our partner companies are not permitted to collect, process or use data with regard to your person using cookies via our website.
You have the option of preventing cookies from being saved on your computer by setting your browser accordingly, however this may result in a restriction in website functionality.
Analytics and cookies
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called cookies, which are text files stored on your computer and which allow analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA, where it is stored. If IP anonymisation is activated on this website, however, Google will first shorten your IP address within the member states of the European Union or in other countries that are parties to the European Economic Area Agreement. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to analyse your use of the website in order to compile reports on the website activities and offer the website operator additional services relating to website and Internet use. The IP address transmitted by your browser for Google Analytics purposes will not be associated with other data from Google. You can prevent cookies from being stored by setting your browser software accordingly; however, please note that you may then not be able to use all the functions on this website to their full extent. You can also prevent the collection of data generated by the cookie relating to your use of the website (incl. your IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in provided under the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
You can prevent data collection by Google Analytics by clicking on the following link. An opt-out cookie is set which prevents your data from being collected when you visit this site in future: Deactivate Google Analytics
Facebook, Twitter, Pinterest
Our website uses plug-ins for social networks such as Facebook, Twitter and Pinterest. When these pages are called up, a connection is established between your browser and the server of the respective network and data is transferred. If you click on the share buttons ("Like", "Retweet" or "Pin"), our content is forwarded to your respective profile and published there under your name. As a provider, we receive no information from Facebook, Twitter or Pinterest regarding the transferred data and the use thereof.
You will find further information in the data privacy statements provided by Facebook, Twitter or Pinterest.
Personal data you voluntarily disclose to us in accordance with article 6, paragraph 1 lit. a GDPR is only used by us to communicate with you (e.g. by e-mail to confirm your registration) and for the distribution of our newsletter
You can revoke your consent regarding the use of your data for the creation of user profiles by writing to firstname.lastname@example.org or by clicking the unsubscribe link included in our newsletter.
4. Purpose of data collection and processing
We only process your personal data for the purpose of establishing a customer relationship with you. Your details are thus processed for:
the handling of your queries and complaints
the correction of your personal data, for instance if contact details have changed
the performance of pre-contract tasks
the fulfilment of contracts entered into with you
the processing of invoices
general communication with you
the documentation of our business relationship
the distribution of marketing material, product information and special offer alerts
the safeguarding of our IT systems
5. Legal bases for data processing
Your personal data is collected, processed and stored according to the GDPR and the applicable national data protection regulations.
The main legal bases are outlined below. Please note however that this information is not exhaustive and only covers the main legal provisions.
Consent (article 6 paragraph 1 lit. a GDPR)
Certain personal data is only processed with your explicit prior consent, for instance where you entitled us to use it to send you marketing material or information on products and special offers. You have the right to withdraw your consent at any time.
Performance of a contract with you (article 6 paragraph 1 lit. b GDPR)
Certain personal data is required by us in order to fulfil a contract or perform certain pre-contract tasks. We only process your personal data as far as this is required in order to meet our contractual obligations.
Compliance with a legal obligation (article 6 paragraph 1 lit. c GDPR)
Pollmeier must meet a range of statutory obligations. These include the processing of certain personal data, for instance in connection with statutory filing requirements, tax law or customs regulations.
Protection of legitimate interests of Pollmeier or third parties (article 6 paragraph 1 lit. f GDPR)
Pollmeier is entitled to process certain personal data in order to pursue its own legitimate interests or to protect such interests of third parties. This is however only done, if your interests do not take precedence over those of Pollmeier.
5. Authorisation of access to your personal data
Pollmeier ensures that your personal data is only accessible to a limited number of specifically authorised persons who need your data for the purposes outlined above.
We do not make your personal data available to third parties, unless this is necessary for the fulfilment of a contract or where we have received your consent.
For the processing of your queries and certain services, we might contract external data processors. These service providers are contractually obliged to adhere to all applicable data protection regulations, and only process your personal data according to our instructions.
Such service providers are contract data processors or other companies that provide services such as:
Technical support and maintenance services for our IT infrastructure and applications
Payment processing and collection procedures
Marketing (e.g. newsletter)
Procurement / purchasing
All data processing takes place in Germany or another EU Member State. Should personal data collected and processed by us be transferred to a third party based outside the European Economic Area (EEA), we take suitable measures to ensure that the requirements of the GDPR are met at all times, for instance by entering into contracts based on EU sample agreements, through Privacy Shield Certification (US), recognised codes of conduct or other certification mechanisms in accordance with article 42 GDPR.
6. Duration of data storage
In accordance with article 17 paragraph 1 lit. a GDPR, your personal data is routinely erased the moment it is no longer required for the fulfilment of a contract, and when the statutory filing period has elapsed.
Data that cannot be erased, for instance due to special filing obligations under commercial and tax law, open claims or limitations of statue, is blocked.
7. Automated individual decision-making
We do not use automated individual decision-making according to article 22 GDPR for the establishment and maintenance of business relationships. Should we decide to use such methods in individual cases, we will inform you in advance in accordance with the law.
8. Data security
Pollmeier has taken technical and organisational measures that are deemed suitable to protect your personal data against unauthorised and illegal access or disclosure. We have also put mechanisms in place that protect your data against inadvertent or unauthorised falsification, loss or destruction. These measures guarantee a data security level that is appropriate for the nature, scope and type of personal data we collect and the potential risks of illegal access and abuse.
We continually revise and improve our data security measures to keep them up to date.
9. Your rights
If you have any queries or concerns regarding the handling of your personal data by Pollmeier, please contact our Data Protection Officer. He and his team would be delighted to answer your questions and address your concerns.
Contact details of Data Protection Officer of Pollmeier:
Mr Steffen Tracz
Pferdsdorfer Weg 6
D-99831 Amt Creuzburg
As a data subject, you have a number of rights with regard to how your personal data collected and processed by Pollmeier.
By law, you have the following rights:
Right of information about data relating to you (right of information)
Right to request that incorrect data is corrected and incomplete data is completed, taking into account the purpose for which the data is used (right of rectification)
and, if there are sound reasons and legal grounds:
Right of deletion of personal data (right to being forgotten)
Right to request that the processing of your personal data is restricted (right of limitation of processing)
Right to request that your personal data made available to us is transferred to another data controller (right of data transfer)
Right to object to the processing of your personal data (right of objection)
In addition, you are at all times entitled to lodge a complaint with the relevant data protection authorities.
10. Validity of data protection policy
This data protection policy came into force on 24/05/2018.